$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa File: 333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa (raw, json) Hash identifier: LwZQYNFR845PFKtmAWQoAhpmUyHJY54GZm91UzA/k9o= Subject key identifier: 9D:38:58:63:70:4C:80:FB:9E:C0:36:50:69:E6:94:86:54:E8:A4:48 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584B2331874C42E4DDA19018ED80 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 202 IP address blocks: 20.137.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:87:4c:42:e4:dd:a1:90:18:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=032398b9-a800-476f-bb2f-b876e21371d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:37:83:71:ec:bd:70:2f:47:9e:51:ca:37:8f: 08:3f:a0:b8:10:fa:ca:89:4d:7e:02:51:05:8d:06: 90:48:39:27:00:c4:b7:35:4b:d7:7e:de:8d:aa:09: 7a:9d:30:d3:1f:4d:aa:90:66:2c:d2:b3:af:61:df: 7c:1f:09:66:25:f8:85:7e:91:69:15:86:fd:a2:48: d8:5a:fd:fe:60:db:2a:b5:f4:c8:32:cc:c9:ac:66: 96:b7:fd:7b:ec:e0:37:71:85:fe:e0:01:e4:42:0a: a0:51:0a:f7:9d:f6:70:05:44:b3:12:2a:7d:67:42: a7:6a:37:f6:37:b0:bb:78:d2:ef:ad:01:4c:59:17: 7f:c3:58:b0:ee:fd:c8:61:3c:42:ba:fa:44:05:a8: 00:f7:d5:a5:d0:8c:d9:6f:80:28:09:32:87:44:6b: 9b:28:20:67:70:dc:0c:16:0f:95:37:34:b0:14:12: 57:79:4e:63:91:cf:b8:c3:1d:34:1a:9f:aa:06:05: 09:d4:46:f9:9c:5d:19:3a:3a:b1:41:fa:e9:0d:c9: 64:d4:c0:81:ee:64:c2:8f:79:5f:db:72:0f:0a:f7: 85:0d:2d:10:81:31:44:ac:54:a0:38:0a:58:fc:3d: f2:04:2b:0a:96:ba:3b:53:ce:53:36:f0:04:6f:dc: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:38:58:63:70:4C:80:FB:9E:C0:36:50:69:E6:94:86:54:E8:A4:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/333174a5-9d4e-3ede-a640-0ae71f53e7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.137.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4c:f8:f8:02:d9:10:12:61:28:a1:14:12:13:a8:78:eb:cb: 74:bb:a0:ee:66:2c:55:b3:10:75:4b:75:ef:63:ab:21:c8:f3: f9:40:3a:53:3d:6a:6e:1c:c8:ea:36:1f:74:52:c0:05:75:26: 13:e9:4f:07:a5:8c:0f:5f:dd:39:c7:e4:f2:c3:90:40:fa:6b: 57:ee:16:50:86:09:fe:51:28:d6:44:e4:2f:f9:70:a4:e9:72: bd:f7:c7:65:35:dd:a6:88:67:ae:e5:85:be:03:08:bf:72:9b: 9d:a0:b9:52:7d:da:53:f9:aa:83:17:ac:98:ac:cd:70:d6:25: 29:45:c6:e3:b0:79:4a:9b:8c:87:a5:b3:4e:23:ee:3e:68:6a: 97:14:e0:6e:72:e7:09:1e:ec:cf:c8:b3:00:04:08:2b:d0:e7: 7b:3e:8f:f1:bc:95:4a:9a:52:50:56:77:9a:3e:20:32:29:4e: f5:3c:12:c0:b0:d7:63:ef:49:76:3e:4d:2a:f8:1b:4a:7e:4d: 4a:f0:82:23:10:57:8c:aa:bd:a1:b4:58:0b:55:2e:4f:03:f8: 70:f1:2f:41:66:49:2b:1c:5d:35:25:3b:99:47:01:ba:59:4d: 21:8d:28:21:cb:de:25:35:62:7c:4e:27:63:fe:58:a6:bf:c7: d4:a0:46:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYdMQuTdoZAY7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MDMyMzk4YjktYTgwMC00NzZmLWJiMmYtYjg3NmUyMTM3MWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DeDcey9cC9HnlHKN48IP6C4EPrKiU1+AlEF jQaQSDknAMS3NUvXft6Nqgl6nTDTH02qkGYs0rOvYd98HwlmJfiFfpFpFYb9okjY Wv3+YNsqtfTIMszJrGaWt/177OA3cYX+4AHkQgqgUQr3nfZwBUSzEip9Z0Knajf2 N7C7eNLvrQFMWRd/w1iw7v3IYTxCuvpEBagA99Wl0IzZb4AoCTKHRGubKCBncNwM Fg+VNzSwFBJXeU5jkc+4wx00Gp+qBgUJ1Eb5nF0ZOjqxQfrpDclk1MCB7mTCj3lf 23IPCveFDS0QgTFErFSgOApY/D3yBCsKlro7U85TNvAEb9wAMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ04WGNwTID7nsA2UGnmlIZU6KRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMzMzMTc0YTUtOWQ0ZS0z ZWRlLWE2NDAtMGFlNzFmNTNlN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBM+PgC2RASYSihFBITqHjry3S7oO5mLFWzEHVLde9jqyHI8/lAOlM9 am4cyOo2H3RSwAV1JhPpTweljA9f3TnH5PLDkED6a1fuFlCGCf5RKNZE5C/5cKTp cr33x2U13aaIZ67lhb4DCL9ym52guVJ92lP5qoMXrJiszXDWJSlFxuOweUqbjIel s04j7j5oapcU4G5y5wke7M/IswAECCvQ53s+j/G8lUqaUlBWd5o+IDIpTvU8EsCw 12PvSXY+TSr4G0p+TUrwgiMQV4yqvaG0WAtVLk8D+HDxL0FmSSscXTUlO5lHAbpZ TSGNKCHL3iU1YnxOJ2P+WKa/x9SgRs8= -----END CERTIFICATE-----Generated at Wed Oct 22 13:02:56 2025 by rpki-client